Tips-Of-Mine/PowerHuntShares
Tips-Of-Mine/PowerHuntShares
2
0
Fork 0
mirror of https://github.com/NetSPI/PowerHuntShares.git synced 2025-05-04 19:28:42 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update PowerHuntShares.psm1

Browse Source 
Added sankey chart.
This commit is contained in:
Scott Sutherland 2024-09-12 16:22:10 -05:00 committed by GitHub
parent c4b4e9471a
commit 7688161294
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 164 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

165
PowerHuntShares.psm1
View File

@ -4,7 +4,7 @@
#--------------------------------------
# Author: Scott Sutherland, 2024 NetSPI
# License: 3-clause BSD
# Version: v1.116
# Version: v1.117
# References: This script includes custom code and code taken and modified from the open source projects PowerView, Invoke-Ping, and Invoke-Parrell.
function Invoke-HuntSMBShares
{
@ -2445,6 +2445,67 @@ function Invoke-HuntSMBShares
$RemediationSavings = $RemediationSaveSnP
}
# ----------------------------------------------------------------------
# Generate Sankey Summary C H M L
# ----------------------------------------------------------------------
# Create critical edge
if($RiskLevelCountCritical -gt 0){
$SanKeyCritical = @"
{
source: 'ACEs ($ExcessiveSharePrivsCount)',
target: 'Critical ($RiskLevelCountCritical)',
value: $RiskLevelCountCritical,
color: '#93E6C4', // Custom color for this edge
},
"@
}else{
$SanKeyCrtiical = ""
}
# Create high edge
if($RiskLevelCountHigh -gt 0){
$SanKeyHigh = @"
{
source: 'ACEs ($ExcessiveSharePrivsCount)',
target: 'High ($RiskLevelCountHigh)',
value: $RiskLevelCountHigh,
color: '#FB897C', // Custom color for this edge
},
"@
}else{
$SanKeyHigh = ""
}
# Create medium edge
if($RiskLevelCountMedium -gt 0){
$SanKeyMedium = @"
{
source: 'ACEs ($ExcessiveSharePrivsCount)',
target: 'Medium ($RiskLevelCountMedium)',
value: $RiskLevelCountMedium,
color: '#FDAC70', // Custom color for this edge
},
"@
}else{
$SanKeyMedium = ""
}
# Create low edge
if($RiskLevelCountLow -gt 0){
$SanKeyLow = @"
{
source: 'ACEs ($ExcessiveSharePrivsCount)',
target: 'Low ($RiskLevelCountLow)',
value: $RiskLevelCountLow,
color: '#FEDA94', // Custom color for this edge
},
"@
}else{
$SanKeyLow = ""
}
# ----------------------------------------------------------------------
# Create ShareGraph Nodes and Edges
# ----------------------------------------------------------------------
@ -3943,6 +4004,7 @@ $NewHtmlReport = @"
<script src="https://unpkg.com/cytoscape-euler/cytoscape-euler.js"></script>
<script src="https://unpkg.com/klayjs/klay.js"></script>
<script src="https://unpkg.com/cytoscape-klay/cytoscape-klay.js"></script>
<script src="https://cdn.jsdelivr.net/npm/apexsankey"></script>
<title>Report</title>
<style>
@ -5529,6 +5591,16 @@ input[type="checkbox"]:checked::before {
</div>
<div style="margin-left: 10px; width: 90%; margin-bottom: 10px;">
The chart below illustrates the relationship between networks, computers, shares, and the ACEs configured with excessive privileges. Each network contains computers with assigned IP addresses. Each computer may host multiple shares and each share is configured with ACEs that allow remote access. As a result, ACEs represent the individual points of remediation that will need to be addressed to reduce exposure and risk.
</div>
<div class="LargeCard" style="width: 90%;">
<a href="#" id="DashLink" style="text-decoration:none;">
</a>
<div style="width: 100%; height: 200px;" id="svg-sankey"></div>
</div>
<!--
|||||||||| CARD: Remediation Recommendations
-->
@ -9019,6 +9091,97 @@ Invoke-HuntSMBShares -Threads 20 -RunSpaceTimeOut 10 -OutputDirectory c:\folder\
<br>
<script>
// --------------------------
// Dashboard Page: Sankey Chart
// --------------------------
const SankeyData = {
nodes: [
{
id: 'Networks ($SubnetsCount)',
title: 'Networks ($SubnetsCount)',
color: '#0c8b99',
},
{
id: 'Computers ($ComputerWithExcessive)',
title: 'Computers ($ComputerWithExcessive)',
color: '#04B9CD',
},
{
id: 'Shares ($ExcessiveSharesCount)',
title: 'Shares ($ExcessiveSharesCount)',
color: '#45D1C8',
},
{
id: 'ACEs ($ExcessiveSharePrivsCount)',
title: 'ACEs ($ExcessiveSharePrivsCount)',
color: '#93E6C4',
},
{
id: 'Critical ($RiskLevelCountCritical)',
title: 'Critical ($RiskLevelCountCritical)',
color: '#FF6A6A',
},
{
id: 'High ($RiskLevelCountHigh)',
title: 'High ($RiskLevelCountHigh)',
color: '#FB897C',
},
{
id: 'Medium ($RiskLevelCountMedium)',
title: 'Medium ($RiskLevelCountMedium)',
color: '#FDAC70',
},
{
id: 'Low ($RiskLevelCountLow)',
title: 'Low ($RiskLevelCountLow)',
color: '#FEDA94',
},
],
edges: [
{
source: 'Networks ($SubnetsCount)',
target: 'Computers ($ComputerWithExcessive)',
value: $ComputerWithExcessive,
color: '#0c8b99', // Custom color for this edge
},
{
source: 'Computers ($ComputerWithExcessive)',
target: 'Shares ($ExcessiveSharesCount)',
value: $ExcessiveSharesCount,
color: '#04B9CD', // Custom color for this edge
},
{
source: 'Shares ($ExcessiveSharesCount)',
target: 'ACEs ($ExcessiveSharePrivsCount)',
value: $ExcessiveSharePrivsCount,
color: '#45D1C8', // Custom color for this edge
},
$SanKeyCritical
$SanKeyHigh
$SanKeyMedium
$SanKeyLow
],
};
const graphOptions = {
nodeWidth: 10,
fontFamily: 'Quicksand, sans-serif',
fontSize: '14px',
fontWeight: 400,
fontColor: '#07142A',
height: 200,
width: 1200,
spacing: 10, // margin
enableTooltip: true,
canvasStyle: 'border: 0px solid #caced0;',
};
const s = new ApexSankey(document.getElementById('svg-sankey'), graphOptions);
s.render(SankeyData);
// --------------------------
// side menu collapse function
// --------------------------